Out-of-Bounds Read Vulnerability in Bentley MicroStation and Bentley View
CVE-2022-35906

3.3LOW

Key Information:

Vendor

Bentley
Status
Microstation
View
Vendor
CVE Published:
15 July 2022

What is CVE-2022-35906?

A vulnerability exists in Bentley MicroStation and Bentley View that could lead to an out-of-bounds read when opening a specially crafted DGN file. This failure occurs due to the improper handling of crafted data in the parsing process, allowing an attacker to potentially read sensitive information within the context of the affected process. Users of these products are advised to update to versions 10.17.0.x or later to mitigate this issue.

References

https://www.bentley.com/en/common-vulnerability-exposure/...
x_refsource_MISC

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2022-35906 : Out-of-Bounds Read Vulnerability in Bentley MicroStation and Bentley View